Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2023-22952 | SugarCRM | Multiple Products | 8.8 High | Multiple SugarCRM Products Remote Code Execution Vulnerability | 2023-02-02 | 2023-02-23 | Unknown |
| CVE-2022-21587 | Oracle | E-Business Suite | 9.8 Critical | Oracle E-Business Suite Unspecified Vulnerability | 2023-02-02 | 2023-02-23 | Known |
| CVE-2017-11357 | Telerik | User Interface (UI) for ASP.NET AJAX | 9.8 Critical | Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability | 2023-01-26 | 2023-02-16 | Known |
| CVE-2022-47966 | Zoho | ManageEngine | 9.8 Critical | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | 2023-01-23 | 2023-02-13 | Known |
| CVE-2022-44877 | CWP | Control Web Panel | 9.8 Critical | CWP Control Web Panel OS Command Injection Vulnerability | 2023-01-17 | 2023-02-07 | Unknown |
| CVE-2023-21674 | Microsoft | Windows | 8.8 High | Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability | 2023-01-10 | 2023-01-31 | Unknown |
| CVE-2022-41080 | Microsoft | Exchange Server | 8.8 High | Microsoft Exchange Server Privilege Escalation Vulnerability | 2023-01-10 | 2023-01-31 | Known |
| CVE-2018-5430 | TIBCO | JasperReports | 8.8 High | TIBCO JasperReports Server Information Disclosure Vulnerability | 2022-12-29 | 2023-01-19 | Unknown |
| CVE-2018-18809 | TIBCO | JasperReports | 6.5 Medium | TIBCO JasperReports Library Directory Traversal Vulnerability | 2022-12-29 | 2023-01-19 | Unknown |
| CVE-2022-42856 | Apple | iOS | 8.8 High | Apple iOS Type Confusion Vulnerability | 2022-12-14 | 2023-01-04 | Unknown |
| CVE-2022-44698 | Microsoft | Defender | 5.4 Medium | Microsoft Defender SmartScreen Security Feature Bypass Vulnerability | 2022-12-13 | 2023-01-03 | Known |
| CVE-2022-42475 | Fortinet | FortiOS | 9.8 Critical | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | 2022-12-13 | 2023-01-03 | Known |
| CVE-2022-27518 | Citrix | Application Delivery Controller (ADC) and Gateway | 9.8 Critical | Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | 2022-12-13 | 2023-01-03 | Unknown |
| CVE-2022-26501 | Veeam | Backup & Replication | 9.8 Critical | Veeam Backup & Replication Remote Code Execution Vulnerability | 2022-12-13 | 2023-01-03 | Known |
| CVE-2022-26500 | Veeam | Backup & Replication | 8.8 High | Veeam Backup & Replication Remote Code Execution Vulnerability | 2022-12-13 | 2023-01-03 | Known |
| CVE-2022-4262 | Chromium V8 | 8.8 High | Google Chromium V8 Type Confusion Vulnerability | 2022-12-05 | 2022-12-26 | Unknown | |
| CVE-2022-4135 | Chromium GPU | 9.6 Critical | Google Chromium GPU Heap Buffer Overflow Vulnerability | 2022-11-28 | 2022-12-19 | Unknown | |
| CVE-2021-35587 | Oracle | Fusion Middleware | 9.8 Critical | Oracle Fusion Middleware Unspecified Vulnerability | 2022-11-28 | 2022-12-19 | Unknown |
| CVE-2022-41049 | Microsoft | Windows | 5.4 Medium | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 2022-11-14 | 2022-12-09 | Unknown |
| CVE-2022-41128 | Microsoft | Windows | 8.8 High | Microsoft Windows Scripting Languages Remote Code Execution Vulnerability | 2022-11-08 | 2022-12-09 | Unknown |
| CVE-2022-41125 | Microsoft | Windows | 7.8 High | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 2022-11-08 | 2022-12-09 | Unknown |
| CVE-2022-41091 | Microsoft | Windows | 5.4 Medium | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 2022-11-08 | 2022-12-09 | Known |
| CVE-2022-41073 | Microsoft | Windows | 7.8 High | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 2022-11-08 | 2022-12-09 | Known |
| CVE-2021-25370 | Samsung | Mobile Devices | 4.4 Medium | Samsung Mobile Devices Memory Corruption Vulnerability | 2022-11-08 | 2022-11-29 | Unknown |
| CVE-2021-25369 | Samsung | Mobile Devices | 5.5 Medium | Samsung Mobile Devices Improper Access Control Vulnerability | 2022-11-08 | 2022-11-29 | Unknown |
| CVE-2021-25337 | Samsung | Mobile Devices | 7.1 High | Samsung Mobile Devices Improper Access Control Vulnerability | 2022-11-08 | 2022-11-29 | Unknown |
| CVE-2022-3723 | Chromium V8 | 8.8 High | Google Chromium V8 Type Confusion Vulnerability | 2022-10-28 | 2022-11-18 | Unknown | |
| CVE-2022-42827 | Apple | iOS and iPadOS | 7.8 High | Apple iOS and iPadOS Out-of-Bounds Write Vulnerability | 2022-10-25 | 2022-11-15 | Unknown |
| CVE-2020-3433 | Cisco | AnyConnect Secure | 7.8 High | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability | 2022-10-24 | 2022-11-14 | Known |
| CVE-2020-3153 | Cisco | AnyConnect Secure | 6.5 Medium | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability | 2022-10-24 | 2022-11-14 | Known |
| CVE-2018-19323 | GIGABYTE | Multiple Products | 9.8 Critical | GIGABYTE Multiple Products Privilege Escalation Vulnerability | 2022-10-24 | 2022-11-14 | Known |
| CVE-2018-19322 | GIGABYTE | Multiple Products | 7.8 High | GIGABYTE Multiple Products Code Execution Vulnerability | 2022-10-24 | 2022-11-14 | Known |
| CVE-2018-19321 | GIGABYTE | Multiple Products | 7.8 High | GIGABYTE Multiple Products Privilege Escalation Vulnerability | 2022-10-24 | 2022-11-14 | Known |
| CVE-2018-19320 | GIGABYTE | Multiple Products | 7.8 High | GIGABYTE Multiple Products Unspecified Vulnerability | 2022-10-24 | 2022-11-14 | Known |
| CVE-2022-41352 | Synacor | Zimbra Collaboration Suite (ZCS) | 9.8 Critical | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | 2022-10-20 | 2022-11-10 | Known |
| CVE-2021-3493 | Linux | Kernel | 7.8 High | Linux Kernel Privilege Escalation Vulnerability | 2022-10-20 | 2022-11-10 | Unknown |
| CVE-2022-41033 | Microsoft | Windows COM+ Event System Service | 7.8 High | Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability | 2022-10-11 | 2022-11-01 | Unknown |
| CVE-2022-40684 | Fortinet | Multiple Products | 9.8 Critical | Fortinet Multiple Products Authentication Bypass Vulnerability | 2022-10-11 | 2022-11-01 | Known |
| CVE-2022-41082 | Microsoft | Exchange Server | 8.0 High | Microsoft Exchange Server Remote Code Execution Vulnerability | 2022-09-30 | 2022-10-21 | Known |
| CVE-2022-41040 | Microsoft | Exchange Server | 8.8 High | Microsoft Exchange Server Server-Side Request Forgery Vulnerability | 2022-09-30 | 2022-10-21 | Known |
| CVE-2022-36804 | Atlassian | Bitbucket Server and Data Center | 8.8 High | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | 2022-09-30 | 2022-10-21 | Unknown |
| CVE-2022-3236 | Sophos | Firewall | 9.8 Critical | Sophos Firewall Code Injection Vulnerability | 2022-09-23 | 2022-10-14 | Unknown |
| CVE-2022-35405 | Zoho | ManageEngine | 9.8 Critical | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | 2022-09-22 | 2022-10-13 | Unknown |
| CVE-2022-40139 | Trend Micro | Apex One and Apex One as a Service | 7.2 High | Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability | 2022-09-15 | 2022-10-06 | Unknown |
| CVE-2013-6282 | Linux | Kernel | 8.8 High | Linux Kernel Improper Input Validation Vulnerability | 2022-09-15 | 2022-10-06 | Unknown |
| CVE-2013-2597 | Code Aurora | ACDB Audio Driver | 8.4 High | Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability | 2022-09-15 | 2022-10-06 | Unknown |
| CVE-2013-2596 | Linux | Kernel | 7.8 High | Linux Kernel Integer Overflow Vulnerability | 2022-09-15 | 2022-10-06 | Unknown |
| CVE-2013-2094 | Linux | Kernel | 8.4 High | Linux Kernel Privilege Escalation Vulnerability | 2022-09-15 | 2022-10-06 | Unknown |
| CVE-2010-2568 | Microsoft | Windows | 7.8 High | Microsoft Windows Remote Code Execution Vulnerability | 2022-09-15 | 2022-10-06 | Unknown |
| CVE-2022-37969 | Microsoft | Windows | 7.8 High | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 2022-09-14 | 2022-10-05 | Known |